CVE-2024-9320

Summary

CVE-2024-9320 is a cross-site scripting vulnerability identified in the SourceCodester Online Timesheet App version 1.0, specifically affecting the file /endpoint/add-timesheet.php. The vulnerability arises from improper handling of user input in the Add Timesheet Form, allowing attackers to manipulate arguments such as "day/task" and execute malicious scripts remotely. This poses a potential risk to organizations using this application, as it could lead to unauthorized access or data manipulation with a medium severity rating (CVSS score of 5.4). To mitigate this vulnerability, it is recommended that users update their software or implement input validation measures to ensure proper sanitization of user inputs. Public disclosure of the vulnerability increases its exploitability, making timely remediation critical for affected users.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.